Examkin

Soru

Zorluk: ZorLogin Security, Login IP Ranges, and Login Hours

An administrator at Meridian Biotech is evaluating login security controls for users assigned to the custom 'Clinical Researcher' profile. The administrator configures the following settings:

- Profile-level Login IP Ranges: 198.51.100.10 to 198.51.100.50
- Organization-wide Network Access Trusted IP Ranges: 203.0.113.0 to 203.0.113.255
- Profile-level Login Hours: Monday through Friday, 8:00 AM to 5:00 PM EST

Which two authentication outcomes will occur based on these combined security settings?

  1. A user attempting to log in from IP address 203.0.113.15 at 10:00 AM on Wednesday is denied access immediately without receiving an identity verification prompt.Cevap
  2. B
    A user attempting to log in from IP address 203.0.113.15 at 10:00 AM on Wednesday is prompted for multi-factor identity verification because the IP address is listed under Network Access.
  3. A user attempting to log in from IP address 198.51.100.25 at 9:00 AM on Saturday is denied access because the attempt falls outside the profile's designated login hours.Cevap
  4. D
    A user attempting to log in from IP address 198.51.100.20 at 7:00 PM on Tuesday is granted read-only access because valid profile IP ranges override login hour restrictions.

Cevap

The two correct outcomes are that a user logging in from IP 203.0.113.15 at 10:00 AM on Wednesday is denied access immediately without an activation prompt, and a user logging in from IP 198.51.100.25 at 9:00 AM on Saturday is denied access due to login hours restrictions.
Profile-level Login IP Ranges establish a strict whitelist. Attempts originating outside 198.51.100.10–198.51.100.50 are rejected outright without sending an identity verification prompt, making the Wednesday attempt from IP 203.0.113.15 denied immediately. Separately, Profile Login Hours enforce temporal boundaries; because Saturday is not within Monday–Friday, the Saturday morning attempt is denied regardless of IP validity.

Adım Adım Çözüm

1
Evaluate the login attempt from IP 203.0.113.15 against Profile-level Login IP Ranges.
IP 203.0.113.15 lies outside the allowed range of 198.51.100.10 to 198.51.100.50.
When profile-level IP ranges are configured, Salesforce enforces a hard denial on any IP address outside that range, completely ignoring organization-wide Network Access settings.
2
Evaluate the Saturday 9:00 AM login attempt from IP 198.51.100.25 against Profile-level Login Hours.
Saturday falls outside the allowed window of Monday through Friday, 8:00 AM to 5:00 PM EST.
Profile-level Login Hours block any login attempt outside the defined time window, even if the user connects from an explicitly allowed IP address.

Anahtar Kavram

Profile-level Login IP Ranges strictly restrict access (hard block outside range), taking precedence over Organization-wide Network Access. Profile Login Hours independently enforce strict login time boundaries.
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Login Security, Login IP Ranges, and Login Hours

Bu konudan daha fazla soru